Evaluate KB3004394

[KOLANICH]

https://support.microsoft.com/en-us/kb/3004394

The Windows Root Certificate Program enables trusted root certificates to be distributed automatically in Windows. Usually, a client computer polls root certificate updates one time a week. After you apply this update, the client computer can receive urgent root certificate updates within 24 hours.

Seems strange. Why anyone can need to update Root certificates (not revocation lists) so often?

[AnrDaemon]

Technically, if a root certificate gets compromised, you can no longer trust CRL's.